In short: FoxLink uses a small, deliberate set of trusted service providers to run the product. Your account and CRM data are stored and processed in the United Kingdom. We keep this list current and give notice before it changes.
A sub-processor is a third-party service that Polyfox Studio Ltd uses to help deliver FoxLink and that may process personal data on our behalf. We only engage sub-processors that provide sufficient guarantees to protect your data, and we remain responsible to you for their performance.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Database, authentication and file storage | All account and CRM data | EU West (London), UK |
| Vercel | Application hosting and compute | Transient request data | London (lhr1), UK |
| Anthropic | AI-assisted features (on-demand only) | CRM context sent per request; not used to train models | United States |
| Resend | Transactional and notification email | Email addresses and message content | United States |
| Upstash | Rate limiting and usage counters (Redis) | Workspace / user / API-key identifiers and counters | EU (London), UK |
| Sentry | Error monitoring and diagnostics | Diagnostic and error context, which may include limited personal data | EU (Frankfurt) |
| Stripe | Payment processing | Billing and contact data (no card data stored by FoxLink) | United States / EU |
Where a sub-processor processes data outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement and/or the European Commission's Standard Contractual Clauses.
We will give at least 30 days' notice before adding or replacing a sub-processor, by updating this page and notifying workspace owners. If you have a data processing agreement with us and object to a new sub-processor on reasonable data-protection grounds, you may raise it with us during that period.
Questions about our sub-processors or data protection? Email privacy@foxlink.network.